Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,523
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,555 recordsRanked by popularity · browse by tag · record statistics
crates.io
43Weakhealth index
ferrilab/ferrilab
Experimenting with Rust's fundamental data model
Rust★ 64↓ 35.7M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
gettext-rs/gettext-rs
GNU Gettext FFI binding for Rust
Rust★ 64↓ 320.5K/moAug 6, 2026
No licenseAug 6, 2026 · metrics 2.10.0
14Criticalhealth index
mirage/functoria
A DSL to invoke otherworldly functors
OCaml★ 64Jul 19, 2026
ISCJul 19, 2026 · metrics 2.10.0
PyPI
46Weakhealth index
pyupio/dparse
A parser for Python dependency files
Python★ 64↓ 4.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
37Weakhealth index
sindresorhus/merge-streams
Merge multiple streams into a unified stream
JavaScript★ 64↓ 133M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/roadrunner-bridge
🌉 RoadRunner bridge to Spiral Framework
PHP★ 64↓ 119.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Go
23At Riskhealth index
xanzy/ssh-agent
Create a new SSH agent on any type of OS (so including Windows)
Go★ 64Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
20At Riskhealth index
Fractions-DotNet/Fractions
A fraction data type to calculate with rational numbers.
C#★ 63Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
TritonDataCenter/node-asn1
Contains parsers and serializers for ASN.1 (currently BER only)
AGS Script · JavaScript · Makefile★ 63Aug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
espressif/idf-component-manager
Tool for installing ESP-IDF components
Python★ 63Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modern-python/modern-di
Powerful dependency-injection framework with IoC container and scopes
Python★ 63↓ 5,407/moAug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
20At Riskhealth index
monochromegane/go-gitignore
A fast gitignore matching library for Go.
Go★ 63Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
13Criticalhealth index
n8n-io/localtunnel
exposes your localhost to the world
JavaScript★ 63↓ 77.8K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
natalie-lang/natalie_parser
NatalieParser is a zero-dependency, from-scratch, hand-written recursive descent parser for the Ruby Programming Language.
C++ · Ruby★ 63Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
paragonie/corner
Exceptions and Errors made more user-friendly
PHP★ 63↓ 26K/moJul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
npm
16Criticalhealth index
peterszombati/xapi-node
xStation5 Trading API for NodeJS/JS
TypeScript★ 63↓ 2,293/moJul 24, 2026
Custom licenseJul 24, 2026 · metrics 2.10.0
26At Riskhealth index
uskr/jsonrpc-lean
Lightweight, fast, transport-agnostic, c++ implementation of the JSON-RPC 2.0 specification
C++★ 63Aug 1, 2026
LGPL-3.0Aug 1, 2026 · metrics 2.10.0
23At Riskhealth index
aedobbyn/covid19us
R package for the COVID Tracking Project API providing US COVID-19 data
R★ 62Sep 8, 2026
Custom licenseSep 8, 2026 · metrics 2.10.0
npm
32At Riskhealth index
humanwhocodes/retry
A JavaScript utility for retrying async methods that reject errors
JavaScript★ 62↓ 463M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
crates.io
38Weakhealth index
indiv0/lazycell
Rust library providing a lazily filled Cell
Rust★ 62↓ 6.2M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
jcb91/jupyter_highlight_selected_word
Jupyter notebook extension that enables highlighting every instance of the current word in the notebook
JavaScript · Python★ 62Aug 19, 2026
Custom licenseAug 19, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
oneduo/laravel-recaptcha-enterprise
A tiny and simple Laravel wrapper to use Google reCAPTCHA Enterprise v3
PHP★ 62↓ 3,516/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
npm
27At Riskhealth index
plumelo/rollup-plugin-styler
🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
TypeScript★ 62↓ 259.7K/moSep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
servo/rust-layers
A GPU-accelerated 2D animation library for Rust
Rust★ 62↓ 3/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
thk1/send_wrapper
No repository description published.
Rust★ 62↓ 3.1M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/router
Router is a request matcher and URL generator
PHP★ 62↓ 17.1K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0